c0d3dfc1e72066434b51f0d18d4b94adb6d7dbc03dfd4dc4955b1ed3487700ee | Triage

Analysis

max time kernel
44s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
15-09-2022 12:50

Sharing

Report Analysis Logs

General

Target

one/lookWay.js
Size

137B
MD5

9f9be4989a96cd00f353ed99b2a34979
SHA1

64fa5add5da08cf0a829392ef06ef82e7e1ce009
SHA256

519f112b75dc648086aaa81afe9312ce37d15e3531ed421ad0b334be99df4ac1
SHA512

055da0c436b6dc097a718763c31fc93eb34a165589365a3ca2eb70e6242eb0e6bc76bb8fbbcf84bfa35591a06d37be38bf8e6eec7e0b43a02d7621366e120f00

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\wscript.exe
wscript.exe C:\Users\Admin\AppData\Local\Temp\one\lookWay.js
1⤵
PID:1528

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1528-54-0x000007FEFBDE1000-0x000007FEFBDE3000-memory.dmp

Filesize
8KB

Download